7 posts in categories kubernetes

• kubernetes
• istio
• linkerd
• service-mesh
• mtls
• networking
• security

Comparing Istio 1.29 (sidecar mode) and Linkerd 2.19: data plane, mTLS, egress, resource overhead, observability, and when to use each.

• kubernetes
• istio
• envoy
• gateway-api
• networking
• security
• mtls
• service-mesh
• cilium
• aks
• gke

Comparing Istio and Envoy Gateway as Gateway API implementations: mTLS, egress, Cilium, managed cloud specifics (AKS, GKE, OVH MKS), and real client IP.

• envoy
• envoy-gateway
• rate-limiting
• kubernetes
• kustomize
• helm
• valkey
• redis
• xds
• gateway-api

How to wire envoyproxy/ratelimit as a self-hosted service into Envoy Gateway v1.7 using EnvoyPatchPolicy — three xDS patches, namespace-admin self-service, and the pitfalls to avoid.

• go
• cert-manager
• dns
• kubernetes
• openshift

How cert-manager-webhook-libdns enables DNS-01 across many DNS providers via libdns, with practical operational improvements, compatibility automation, and a quick Kubernetes deployment path.

• eso
• openshift
• kubernetes

ESO (External Secrets Operator) breaking change in 0.10.0: "secret does not contain needed label... Update secret label to use it with webhook".

• tips-a-tricks
• openshift
• kubernetes

Some Tips and Tricks for openshift and kubernetes

• openshift
• haproxy
• sticky
• kubernetes

How OpenShift and Kubernetes handle session stickiness via HAProxy cookie-based routing.